Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: ighMviMg0ML2IJA+XwCGlz2+gaaJweNWuHOCp4xvQXg=
Subject key identifier: 6D:20:CD:4A:4F:3C:9C:A2:AF:5D:77:C4:41:18:48:21:16:A5:90:31
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 0194BCE064FE8A7815C2F4264D618A9CF5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: /GvvDpAwOzHG1VkL+S1ikEt4Ot2aekKQ2pVSFdkHhpA=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:64:fe:8a:78:15:c2:f4:26:4d:61:8a:9c:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=6d20cd4a4f3c9ca2af5d77c44118482116a59031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:05:0a:3e:96:71:5f:3d:ed:62:ff:9d:fb:
9f:c9:a1:cb:0a:50:54:4f:af:14:d4:9f:c5:d6:0b:
25:a8:1d:71:1e:6c:b7:f0:aa:05:42:54:1d:fb:6e:
73:93:3f:5c:02:64:92:d7:9e:71:a6:f0:2f:37:55:
17:1d:fd:6f:93:ef:31:90:a4:30:a0:48:a5:8a:6b:
be:d2:3e:04:15:cc:33:b9:d9:52:21:3f:06:9a:4a:
1a:f1:fe:b9:df:a3:62:34:46:5b:4e:73:77:d2:b9:
30:aa:22:73:ab:e6:97:c8:07:d1:1c:fd:d6:c2:33:
fc:9a:27:84:5d:a5:3a:cb:b8:f7:55:91:ae:b6:44:
87:8d:1c:82:b7:94:ea:7f:5c:76:82:d2:7b:92:bd:
0c:49:aa:bb:e8:47:73:03:9a:68:f4:2d:b4:43:7c:
39:f8:dd:eb:3c:7b:36:47:05:ff:ca:7c:1d:5a:f6:
30:da:2b:b7:b1:f7:8f:41:b2:43:9f:2e:41:9b:5c:
0c:95:f3:a0:5c:82:d1:a7:d4:e2:cf:ed:6d:33:48:
e4:29:d4:fa:38:d0:ed:0d:a5:92:de:33:df:5f:3f:
68:d3:7e:09:44:15:d1:f4:95:7d:34:5e:00:c1:14:
9e:27:2f:25:49:ed:44:f5:e3:a0:ed:a5:0f:24:8e:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:CD:4A:4F:3C:9C:A2:AF:5D:77:C4:41:18:48:21:16:A5:90:31
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:07:61:66:f5:41:7a:2f:c7:97:79:ff:99:5c:a3:ba:e5:5d:
c5:a3:24:26:65:fd:1a:5d:05:10:92:c7:1a:d7:d3:72:da:de:
33:14:98:8d:79:22:ff:84:e0:1f:09:10:96:36:c8:05:e7:38:
c5:55:69:0c:c7:66:17:82:43:03:d0:83:08:94:d3:5f:52:cb:
fa:f3:72:c6:a7:43:a6:de:c2:70:bc:0a:98:c4:dd:d0:e1:9a:
7d:0a:96:d6:09:18:96:49:49:c2:3e:45:2f:24:ff:0b:c7:04:
05:15:27:99:e8:1d:93:bd:62:d2:ea:4b:b5:09:54:22:e6:52:
99:6e:2f:cd:f1:e8:83:53:ce:57:81:e2:a7:58:37:02:61:04:
23:37:95:28:3f:ed:3f:23:f7:3d:15:bf:66:f4:8b:9e:6b:42:
86:41:a1:eb:a8:5c:d0:04:b9:7d:11:c6:9e:35:45:65:82:d3:
03:c6:87:f6:b5:42:a6:b4:37:12:ff:37:ad:ef:60:8b:2a:0e:
36:d7:1b:60:cd:8d:e1:42:a1:0f:51:0c:7f:7c:7c:ef:a5:b6:
68:27:5d:fb:67:00:89:16:80:4f:d8:1e:f1:71:78:5c:9b:dc:
9f:5d:e4:f4:3e:0b:6e:f5:a3:47:6b:01:a0:19:f3:9d:bf:d4:
16:e8:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:58 2025 by rpki-client